The chart command aggregates data, providing output in tabular format which can then be used for a visualization. Visualizing data is critical to end user analysis, which makes chart a very important command. Notice that if you run the following search query, it is identical to the output of the stats command:
SPL> index=main | chart count by http_method
For all basic purposes, you can use stats and chart interchangeably. However, there will be differences in how stats and chart group data together. It will be up to you to determine which one is your intended result. To show the differences, here are some examples:
SPL> index=main | stats count by http_method http_uri
You can see the result in the following screenshot:
Following is another example:
SPL> index=main | chart count by http_method http_uri
You can see the result...
